Abstract:Connected and Automated Vehicles (CAVs) cybersecurity is an inherently complex, multi-dimensional issue that goes beyond isolated hardware or software vulnerabilities, extending to human threats, network vulnerabilities, and broader system-level risks. Currently, no formal, comprehensive tool exists that integrates these diverse dimensions into a unified framework for CAV cybersecurity assessment. This study addresses this challenge by developing a System Dynamics (SD) model for strategic cybersecurity assessment that considers technological challenges, human threats, and public cybersecurity awareness during the CAV rollout. Specifically, the model incorporates a novel SD-based Stock-and-Flow Model (SFM) that maps six key parameters influencing cyberattacks at the system level. These parameters include CAV communication safety, user adoption rates, log file management, hacker capabilities, understanding of hacker motivations (criminology theory maturity), and public awareness of CAV cybersecurity.The SFM's structure and behaviour were rigorously tested and then used to analyse five plausible scenarios: i) Baseline (Technological Focus Only), ii) Understanding Hacker Motivations, iii) CAV User and OEM Education, iv) CAV Penetration Rate Increase, and v) CAV Penetration Rate Increase with Human Behavior Analysis. Four metrics are used to benchmark CAV cybersecurity: communication safety, probability of hacking attempts, probability of successful defence, and number of CAV adopters. The results indicate that while baseline technological advancements strengthen communication framework robustness, they may also create new vulnerabilities that hackers could exploit. Conversely, a deeper understanding of hacker motivations (Criminology Theory Maturity) effectively reduces hacking attempts. It fosters a more secure environment for early CAV adopters. Additionally, educating CAV users and OEM increases the probability of defending against cyberattacks. While CAV penetration increases the likelihood of hack defence due to a corresponding rise in attempts, there is a noticeable decrease in hacking attempts with CAV penetration when analysing human behaviour. These findings, when translated into policy instruments, can pave the way for a more optimised and resilient cyber-safe ITS.

Cybersecurity Cost of Quality: Managing the Costs of Cybersecurity Risk Management

A Security Cost Modelling Framework for Cyber-Physical Systems

Quantifiable & Comparable Evaluations of Cyber Defensive Capabilities: A Survey & Novel, Unified Approach

A Systematic Synthesis of Critical Success Factors for Cybersecurity

Secure Cyber Incident Analytics Framework Using Monte Carlo Simulations for Financial Cybersecurity Insurance in Cloud Computing

Cyber supply chain risk management: Revolutionizing the strategic control of critical IT systems

QBER: Quantifying Cyber Risks for Strategic Decisions

Cybersecurity management in cloud computing: semantic literature review and conceptual framework proposal

Cyber Risk Assessment for Capital Management

How Do Organizations Seek Cyber Assurance? Investigations on the Adoption of the Common Criteria and Beyond

Managing Cyber Risk, a Science in the Making

Managing Security Projects: Proposition of a Cost Model

Multicriteria Decision Framework for Cybersecurity Risk Assessment and Management

Cyber risk management strategies and integration: toward supply chain cyber resilience and robustness

Risk Management and the Cybersecurity of the U.S. Government

Cybersecurity Framework for Connected and Automated Vehicles: A Modeling Perspective

A Novel Secure Big Data Cyber Incident Analytics Framework for Cloud-Based Cybersecurity Insurance

Mitigating the Risk of Advanced Cyber Attacks: The Role of Quality, Covertness and Intensity of Use of Cyber Weapons

Cyber Security in Cloud: Risk Assessment Models

Mind the Gap: Securely modeling cyber risk based on security deviations from a peer group

Fortify Your Defenses: Strategic Budget Allocation to Enhance Power Grid Cybersecurity